high7.5
CVE-2006-2836
SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the a…
Impact
SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pineapple Technologies | Lore | through 1.5.6 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2006/06/lore-156-sql-injection-vuln.html
- http://secunia.com/advisories/20385
- http://www.securityfocus.com/bid/18206
- http://www.vupen.com/english/advisories/2006/2083
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26801
- http://pridels0.blogspot.com/2006/06/lore-156-sql-injection-vuln.html
- http://secunia.com/advisories/20385
- http://www.securityfocus.com/bid/18206
- http://www.vupen.com/english/advisories/2006/2083
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26801